Figure 35: Active Directory Screen 6. Select the Group Policy tab, choose Default Domain Policy then click Edit.

Transcription

1 PC and Server Configuration Figure 35: Active Directory Screen 6. Select the Group Policy tab, choose Default Domain Policy then click Edit. Figure 36: Group Policy Tab 7. Select Computer Configuration - Windows Settings - Security Settings - Public Key Policies, right-click Automatic Certificate Request Settings - New - Automatic Certificate Request. 47

2 Wireless Access Point User Guide Figure 37: Group Policy Screen 8. When the Certificate Request Wizard appears, click Next. 9. Select Computer, then click Next. Figure 38: Certificate Template Screen 10. Ensure that your certificate authority is checked, then click Next. 11. Review the policy change information and click Finish. 12. Click Start - Run, type cmd and press enter. Enter secedit /refreshpolicy machine_policy This command may take a few minutes to take effect. 48

3 PC and Server Configuration Internet Authentication Service (Radius) Setup 1. Select Start - Programs - Administrative Tools - Internet Authentication Service 2. Right-click on Clients, and select New Client. Figure 39: Service Screen 3. Enter a name for the access point, click Next. 4. Enter the address or name of the Wireless Access Point, and set the shared secret, as entered on the Security Settings of the Wireless Access Point. 5. Click Finish. 6. Right-click on Remote Access Policies, select New Remote Access Policy. 7. Assuming you are using EAP-TLS, name the policy eap-tls, and click Next. 8. Click Add... If you don't want to set any restrictions and a condition is required, select Day-And-Time- Restrictions, and click Add Click Permitted, then OK. Select Next. Figure 40: Attribute Screen 10. Select Grant remote access permission. Click Next. 49

4 Wireless Access Point User Guide 11. Click Edit Profile... and select the Authentication tab. Enable Extensible Authentication Protocol, and select Smart Card or other Certificate. Deselect other authentication methods listed. Click OK. Figure 41: Authentication Screen 12. Select No if you don't want to view the help for EAP. Click Finish. 50

5 PC and Server Configuration Remote Access Login for Users 1. Select Start - Programs - Administrative Tools- Active Directory Users and Computers. 2. Double click on the user who you want to enable. 3. Select the Dial-in tab, and enable Allow access. Click OK. Figure 42: Dial-in Screen 51

6 Wireless Access Point User Guide 802.1x Client Setup on Windows XP Windows XP ships with a complete 802.1x client implementation. If using Windows 2000, you can install SP3 (Service Pack 3) to gain the same functionality. If you don't have either of these systems, you must use the 802.1x client software provided with your wireless adapter. Refer to your vendor's documentation for setup instructions. The following instructions assume that: You are using Windows XP You are connecting to a Windows 2000 server for authentication. You already have a login (User name and password) on the Windows 2000 server. Client Certificate Setup 1. Connect to a network which doesn't require port authentication. 2. Start your Web Browser. In the Address box, enter the IP address of the Windows 2000 Server, followed by /certsrv e.g 3. You will be prompted for a user name and password. Enter the User name and Password assigned to you by your network administrator, and click OK. Figure 43: Connect Screen 4. On the first screen (below), select Request a certificate, click Next. 52

7 PC and Server Configuration Figure 44: Wireless CA Screen 5. Select User certificate request and select User Certificate, the click Next. Figure 45: Request Type Screen 6. Click Submit. 53

8 Wireless Access Point User Guide Figure 46: Identifying Information Screen 7. A message will be displayed, then the certificate will be returned to you. Click Install this certificate. Figure 47:Certificate Issued Screen 8.. You will receive a confirmation message. Click Yes. 54

9 PC and Server Configuration 9. Certificate setup is now complete. Figure 48: Root Certificate Screen 802.1x Authentication Setup 1. Open the properties for the wireless connection, by selecting Start - Control Panel - Network Connections. 2. Right Click on the Wireless Network Connection, and select Properties. 3. Select the Authentication Tab, and ensure that Enable network access control using IEEE 802.1X is selected, and Smart Card or other Certificate is selected from the EAP type. Encryption Settings Figure 49: Authentication Tab The Encryption settings must match the APs (Access Points) on the Wireless network you wish to join. Windows XP will detect any available Wireless networks, and allow you to configure each network independently. 55

10 Wireless Access Point User Guide Your network administrator can advise you of the correct settings for each network x networks typically use EAP-TLS. This is a dynamic key system, so there is no need to enter key values. Enabling Encryption To enable encryption for a wireless network, follow this procedure: 1. Click on the Wireless Networks tab. Figure 50: Wireless Networks Screen 2. Select the wireless network from the Available Networks list, and click Configure. 3. Select and enter the correct values, as advised by your Network Administrator. For example, to use EAP-TLS, you would enable Data encryption, and click the checkbox for the setting The key is provided for me automatically, as shown below. 56

11 PC and Server Configuration Figure 51: Properties Screen Setup for Windows XP and 802.1x client is now complete. 57

12 Wireless Access Point User Guide Using 802.1x Mode (without WPA) This is very similar to using WPA-Enterprise. The only difference is that on your client, you must NOT enable the setting The key is provided for me automatically. Instead, you must enter the WEP key manually, ensuring it matches the WEP key used on the Access Point. Note: Figure 52: Properties Screen On some systems, the "64 bit" WEP key is shown as "40 bit" and the "128 bit" WEP key is shown as "104 bit". This difference arises because the key input by the user is 24 bits less than the key size used for encryption. 58

13 Chapter 5 Operation and Status 5 This Chapter details the operation of the Wireless Access Point and the status screens. Operation Once both the Wireless Access Point and the PCs are configured, operation is automatic. However, you may need to perform the following operations on a regular basis. If using the Access Control feature, update the Trusted PC database as required. (See Access Control in Chapter 3 for details.) If using 802.1x mode, update the User Login data on the Windows 2000 Server, and configure the client PCs, as required. General Screen Use the General link on the main menu to view this screen. 59

14 Wireless Access Point User Guide Figure 53: General Screen 60

15 Operation and Status Data - General Screen Access Point Information Access Point Name MAC Address Country/Region Firmware Version VLAN Management VLAN ID Current IP Settings IP Address Subnet Mask Default Gateway DHCP Client Current Wireless Settings Access Point Mode Operation Mode Channel/Frequency Security Profiles Profile Name SSID Security VLAN Status The current name will be displayed. The MAC (physical) address of the Wireless Access Point. The region or domain, as selected on the Basic Wireless screen. The version of the firmware currently installed. The current VLAN status will be displayed. The current VLAN ID used for management. The IP Address of the Wireless Access Point. The Network Mask (Subnet Mask) for the IP Address above. The Gateway for the LAN segment to which the Wireless Access Point is attached (the same value as the PCs on that LAN segment). This indicates whether the current IP address was obtained from a DHCP Server on your network. It will display "Enabled" or "Disabled". The current Access Point mode is displayed. The current operational mode is displayed. The Channel currently in use is displayed. The current profile name is displayed. The current SSID. This displays the current Security setting. This displays the current VLAN ID. The current status of each Wireless Station is displayed. 61

16 Wireless Access Point User Guide Activity Log If you have a Syslog Server on your LAN, this screen allows you to configure the Access Point to send log data to your Syslog Server. Data - Activity Log Screen Activity Log Window Current Time Log Enable Syslog Syslog Server IP Address Port Buttons Refresh Save As Figure 54: Activity Log Screen The system date and time is displayed. The Log shows details of the connections to the Wireless Access Point. If enabled, log data will be sent to your Syslog Server. Enter the IP address of your Syslog Server. Enter the port number of your Syslog Server. Update the data on screen. Save the log to a file on your pc. 62

17 Operation and Status Wireless Station List This screen is displayed when the Wireless Station List is clicked. Data - Wireless Station List Screen Wireless Station List Station ID MAC Address Type SSID IP Address Status Refresh Button Figure 55 Wireless Station List Screen The ID of each Wireless Station is displayed. The MAC (physical) address of each Wireless Station is displayed. The type of each Wireless Station. This displays the SSID used the Wireless station. Because the Wireless Access Point supports multiple SSIDs, different PCs could connect using different SSIDs. This indicates the current IP Address of each Wireless Station. This indicates the current status of each Wireless Station. Update the data on screen. 63

18 Wireless Access Point User Guide Statistics Screen This screen is displayed when the Statistics is clicked. It shows details of the traffic flowing through the Wireless Access Point. Figure 56: Statistics Screen 64

19 Operation and Status Data - Statistics Screen Wired Ethernet Packets Bytes Wireless Unicast Packets Broadcast Packets Multicast Packets Total Packets Total Bytes The number of packets transmitted to or received from the wired Ethernet. The number of bytes transmitted to or received from the wired Ethernet. Unicast transmission, in which packets are sent or received from a single source to a specified destination Broadcast transmission, in which packets are sent or received from a single source to other destinations. Multicast transmission, in which packets are sent or received from one or more sources to other destinations. Number of the total packets transmitted to or received from Wireless Stations. Number of the total bytes transmitted to or received from Wireless Stations. 65

20 Chapter 6 Other Settings & Features 6 This Chapter explains when and how to use the Wireless Access Point's "Management" Features. Overview This Chapter covers the following features, available on the Wireless Access Point s Management menu. Change Password Remote Management Upgrade Firmware Backup/Restore Settings Reboot AP Change Password Screen The Change Password screen allows you to assign a password to the Wireless Access Point. This password limits access to the configuration interface. The default password is password. It is recommended that this be changed, using this screen. Data - Change Password Screen Figure 57: Change Password Screen Current Password New Password Confirm New Password Enter the current password here. Enter the new password here. Re-enter the new password in this field. 66

21 Other Settings & Features Restore Default Password Click Yes to clear and restore password settings to the factory default values. You will be prompted for the password when you connect, as shown below. Figure 58: Password Dialog Enter the User Name and Password, as set on the Change Password screen above. 67

22 Wireless Access Point User Guide Remote Management SNMP (Simple Network Management Protocol) is only useful if you have a SNMP program on your PC. To reach this screen, select Remote Management in the Management section of the menu. Data - Remote Management Screen Remote Management SNMP Public Community Name Private Community Name Manager IP Address IP address to.. Figure 59: Remote Management Screen Enable or disable SNMP as required Enter the public community string, usually "Public". Enter the private community string, usually "Private". Enter the IP address of the required station. Enter the IP Address of the desired PC. 68

23 Other Settings & Features Firmware Upgrade The firmware (software) in the Wireless Access Point can be upgraded using your Web Browser. You must first download the upgrade file, and then select Upgrade Firmware in the Management section of the menu. You will see a screen like the following. Figure 60: Firmware Upgrade Screen To perform the Firmware Upgrade: 1. Click the Browse button and navigate to the location of the upgrade file. 2. Select the upgrade file. Its name will appear in the Upgrade File field. 3. Click the Upload button to commence the firmware upgrade. The Wireless Access Point is unavailable during the upgrade process, and must restart when the upgrade is completed. Any connections to or through the Wireless Access Point will be lost. 69

24 Wireless Access Point User Guide Backup/Restore Settings This screen allows you to Backup (download) the configuration file, and to restore (upload) a previously-saved configuration file. You can also set the Wireless Access Point back to its factory default settings. To reach this screen, select Backup/Restore Settings in the Management section of the menu. Data - Backup/Restore Screen Backup Back up a copy of the current settings to a file Figure 61: Backup/Restore Settings Screen Click the Backup button to download the current settings to a file on your PC. 70

25 Other Settings & Features Restore Restore saved settings from a file If you have a previously-saved configuration file, you can use this to restore those settings by uploading the file. 1. Click the Browse button and navigate to the location of the configuration file. 2. Select the upgrade file. Its name will appear in the File field. 3. Click the Restore button to commence the upload. 4. The Wireless Access Point will need to restart, and will be unavailable during the restart. All exiting connections will be broken. Default Default Use this to set the Wireless Access Point back to its factory default settings. Click Default to start the procedure. The Wireless Access Point will need to restart, and will be unavailable during the restart. All exiting connections will be broken. 71

26 Wireless Access Point User Guide Reboot AP To reach this screen, select Reboot AP in the Management section of the menu. Data - Reboot AP Screen Reboot AP Reboot access point Figure 62: Reboot AP Screen Click Yes to restart the Wireless Access Point. 72

27 Appendix A Specifications A Wireless Access Point Hardware Specifications CPU Radio-on-Chip DRAM Flash ROM LAN port 11G/B 11A Antennae AR5312 AR2112+AR Mbytes 4 Mbytes Operating temperature 0~45 1 x Auto-MDIX RJ 45 for 10/100Mbps PoE port IEEE 802.3af comliance Network Standard IEEE b (Wi-Fi ) and IEEE g compliance Operating Frequencies GHz(FCC), GHz(EU) Network Standard IEEE a compliance Operating Frequencies: FCC: GHz, GHz Europe: GHz, GHz Japan: GHz, GHz, GHz 2x5dbi detachable single band antennae. One for 5GHz, the other for 2.4GHz Storage temperature Power Adapter Dimensions -20 DC 12V/1000mA 189mm (W) x 125mm (D) x 34mm (H) Software Specifications Feature Details Wireless Access point support Roaming supported IEEE a/11g/11b compliance Auto Sensing Open System / Share Key authentication Wireless Channels Support Automatic Wireless Channel Selection 73

28 Wireless Access Point User Guide MBSSID support WMM support Tx Power Adjustment Transmit Data Rate Domain Selection Preamble Type: long or short support RTS Threshold Adjustment Fragmentation Threshold Adjustment Beacon Interval Adjustment SSID assignment Short Slot time support Operation Mode Common AP PTP Bridge CTS-only &CTS/RTS protect mechanism support DFS(Dynamic Frequency Selection) Support TPC (Transmit Power Control) Support PTMP Bridge Repeater Security Open, Shared, WPA, WPA-PSK and WPA2-PSK authentication 64bit/128bit/152bit WEP, TKIP, AES-CCMP support 802.1x support EAP-MD5, EAP-TLS, EAP-TTLS, PEAP RADIUS based MAC authentication Block inter-wireless station communication (wireless separation) Block SSID broadcast Management Web based configuration Configurable Web port RADIUS Accounting RADIUS-On feature RADIUS Accounting update Message Log Access Control list file support Configuration file Backup/Restore Statistics support RADIUS DNS name SNMP v1 & v2c Other Features DHCP client WINS client Firmware Upgrade Device discovery program/windows Utility Radius client Enable/Disable Wireless HTTP 74

29 Appendix A - Specifications FCC Statement This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates, uses and can radiate radio frequency energy and, if not installed and used in accordance with the instructions, may cause harmful interference to radio communications. However, there is no guarantee that interference will not occur in a particular installation. If this equipment does cause harmful interference to radio or television reception, which can be determined by turning the equipment off and on, the user is encouraged to try to correct the interference by one of the following measures: Reorient or relocate the receiving antenna. Increase the separation between the equipment and receiver. Connect the equipment into an outlet on a circuit different from that to which the receiver is connected. Consult the dealer or an experienced radio/tv technician for help. To assure continued compliance, any changes or modifications not expressly approved by the party responsible for compliance could void the user's authority to operate this equipment. (Example - use only shielded interface cables when connecting to computer or peripheral devices). FCC Radiation Exposure Statement This equipment complies with FCC RF radiation exposure limits set forth for an uncontrolled environment. This equipment should be installed and operated with a minimum distance of 20 centimeters between the radiator and your body. This device complies with Part 15 of the FCC Rules. Operation is subject to the following two conditions: (1) This device may not cause harmful interference, and (2) this device must accept any interference received, including interference that may cause undesired operation. This transmitter must not be co-located or operating in conjunction with any other antenna or transmitter. 75

30 Appendix B Troubleshooting B Overview This chapter covers some common problems that may be encountered while using the Wireless Access Point and some possible solutions to them. If you follow the suggested steps and the Wireless Access Point still does not function properly, contact your dealer for further advice. General Problems Problem 1: Solution 1: Can't connect to the Wireless Access Point to configure it. Check the following: The Wireless Access Point is properly installed, LAN connections are OK, and it is powered ON. Check the LEDs for port status. Ensure that your PC and the Wireless Access Point are on the same network segment. (If you don't have a router, this must be the case.) If your PC is set to "Obtain an IP Address automatically" (DHCP client), restart it. You can use the following method to determine the IP address of the Wireless Access Point, and then try to connect using the IP address, instead of the name. To Find the Access Point's IP Address 1. Open a MS-DOS Prompt or Command Prompt Window. 2. Use the Ping command to ping the Wireless Access Point. Enter ping followed by the Default Name of the Wireless Access Point. e.g. ping SC Check the output of the ping command to determine the IP address of the Wireless Access Point, as shown below. Figure 63: Ping If your PC uses a Fixed (Static) IP address, ensure that it is using an IP Address which is compatible with the Wireless Access Point. (If no DHCP Server is found, the Wireless Access Point will default to an IP Address and Mask of and ) On Windows PCs, you can use Control Panel-Network to check the Properties for the TCP/IP protocol. 76

31 Appendix B - Troubleshooting Problem 2: Solution 2 My PC can't connect to the LAN via the Wireless Access Point. Check the following: The SSID and WEP settings on the PC match the settings on the Wireless Access Point. On the PC, the wireless mode is set to "Infrastructure" If using the Access Control feature, the PC's name and address is in the Trusted Stations list. If using 802.1x mode, ensure the PC's 802.1x software is configured correctly. See Chapter 4 for details of setup for the Windows XP 802.1x client. If using a different client, refer to the vendor's documentation. 77

32 Appendix C Windows TCP/IP C Overview Normally, no changes need to be made. By default, the Wireless Access Point will act as a DHCP client, automatically obtaining a suitable IP Address (and related information) from your DHCP Server. If using Fixed (specified) IP addresses on your LAN (instead of a DHCP Server), there is no need to change the TCP/IP of each PC. Just configure the Wireless Access Point to match your existing LAN. The following sections provide details about checking the TCP/IP settings for various types of Windows, should that be necessary. Checking TCP/IP Settings - Windows 9x/ME: 1. Select Control Panel - Network. You should see a screen like the following: Figure 64: Network Configuration 2. Select the TCP/IP protocol for your network card. 3. Click on the Properties button. You should then see a screen like the following. 78

33 Appendix C - Windows TCP/IP Figure 65: IP Address (Win 95) Ensure your TCP/IP settings are correct, as follows: Using DHCP To use DHCP, select the radio button Obtain an IP Address automatically. This is the default Windows settings. To work correctly, you need a DHCP server on your LAN. Using "Specify an IP Address" If your PC is already configured for a fixed (specified) IP address, no changes are required. (The Administrator should configure the Wireless Access Point with a fixed IP address from the same address range used on the PCs.) 79

34 Wireless Access Point User Guide Checking TCP/IP Settings - Windows NT Select Control Panel - Network, and, on the Protocols tab, select the TCP/IP protocol, as shown below. Figure 66: Windows NT4.0 - TCP/IP 2. Click the Properties button to see a screen like the one below. Figure 67: Windows NT4.0 - IP Address 80

35 Appendix C - Windows TCP/IP 3. Select the network card for your LAN. 4. Select the appropriate radio button - Obtain an IP address from a DHCP Server or Specify an IP Address, as explained below. Obtain an IP address from a DHCP Server This is the default Windows setting. This is the default Windows settings. To work correctly, you need a DHCP server on your LAN. Using "Specify an IP Address" If your PC is already configured for a fixed (specified) IP address, no changes are required. (The Administrator should configure the Wireless Access Point with a fixed IP address from the same address range used on the PCs.) 81

36 Wireless Access Point User Guide Checking TCP/IP Settings - Windows Select Control Panel - Network and Dial-up Connection. 2. Right click the Local Area Connection icon and select Properties. You should see a screen like the following: Figure 68: Network Configuration (Win 2000) 3. Select the TCP/IP protocol for your network card. 4. Click on the Properties button. You should then see a screen like the following. Figure 69: TCP/IP Properties (Win 2000) 82

37 Appendix C - Windows TCP/IP 5. Ensure your TCP/IP settings are correct: Using DHCP To use DHCP, select the radio button Obtain an IP Address automatically. This is the default Windows setting. This is the default Windows settings. To work correctly, you need a DHCP server on your LAN. Using a fixed IP Address ("Use the following IP Address") If your PC is already configured for a fixed (specified) IP address, no changes are required. (The Administrator should configure the Wireless Access Point with a fixed IP address from the same address range used on the PCs.) 83

38 Wireless Access Point User Guide Checking TCP/IP Settings - Windows XP 1. Select Control Panel - Network Connection. 2. Right click the Local Area Connection and choose Properties. You should see a screen like the following: Figure 70: Network Configuration (Windows XP) 3. Select the TCP/IP protocol for your network card. 4. Click on the Properties button. You should then see a screen like the following. Figure 71: TCP/IP Properties (Windows XP) 84

39 Appendix C - Windows TCP/IP 5. Ensure your TCP/IP settings are correct. Using DHCP To use DHCP, select the radio button Obtain an IP Address automatically. This is the default Windows setting. To work correctly, you need a DHCP server on your LAN. Using a fixed IP Address ("Use the following IP Address") If your PC is already configured for a fixed (specified) IP address, no changes are required. (The Administrator should configure the Wireless Access Point with a fixed IP address from the same address range used on the PCs.) 85

40 Wireless Access Point User Guide Checking TCP/IP Settings - Windows Vista 1. Select Control Panel - Network Connections. 2. Right click the Local Area Connection Status and choose Properties. Click Continue to the User Account Control dialog box, then you should see a screen like the following: Figure 72: Network Configuration (Windows Vista) 3. Select the TCP/IP protocol for your network card. 4. Click on the Properties button. You should then see a screen like the following. 86

41 Appendix C - Windows TCP/IP 5. Ensure your TCP/IP settings are correct. Using DHCP Figure 73: TCP/IP Properties (Windows Vista) To use DHCP, select the radio button Obtain an IP Address automatically. This is the default Windows setting. To work correctly, you need a DHCP server on your LAN. Using a fixed IP Address ("Use the following IP Address") If your PC is already configured for a fixed (specified) IP address, no changes are required. (The Administrator should configure the Wireless Access Point with a fixed IP address from the same address range used on the PCs.) 87

42 Appendix D About Wireless LANs D Overview Wireless networks have their own terms and jargon. It is necessary to understand many of these terms in order to configure and operate a Wireless LAN. Wireless LAN Terminology Modes Wireless LANs can work in either of two (2) modes: Ad-hoc Infrastructure Ad-hoc Mode Ad-hoc mode does not require an Access Point or a wired (Ethernet) LAN. Wireless Stations (e.g. notebook PCs with wireless cards) communicate directly with each other. Infrastructure Mode In Infrastructure Mode, one or more Access Points are used to connect Wireless Stations (e.g. Notebook PCs with wireless cards) to a wired (Ethernet) LAN. The Wireless Stations can then access all LAN resources. Access Points can only function in "Infrastructure" mode, and can communicate only with Wireless Stations which are set to "Infrastructure" mode. SSID/ESSID BSS/SSID A group of Wireless Stations and a single Access Point, all using the same ID (SSID), form a Basic Service Set (BSS). Using the same SSID is essential. Devices with different SSIDs are unable to communicate with each other. However, some Access Points allow connections from Wireless Stations which have their SSID set to any or whose SSID is blank ( null ). ESS/ESSID A group of Wireless Stations, and multiple Access Points, all using the same ID (ESSID), form an Extended Service Set (ESS). 88

43 Appendix D - About Wireless LANs Different Access Points within an ESS can use different Channels. To reduce interference, it is recommended that adjacent Access Points SHOULD use different channels. As Wireless Stations are physically moved through the area covered by an ESS, they will automatically change to the Access Point which has the least interference or best performance. This capability is called Roaming. (Access Points do not have or require Roaming capabilities.) Channels The Wireless Channel sets the radio frequency used for communication. Access Points use a fixed Channel. You can select the Channel used. This allows you to choose a Channel which provides the least interference and best performance. For g, 13 channels are available in the USA and Canada., but 11channels are available in North America if using b. If using multiple Access Points, it is better if adjacent Access Points use different Channels to reduce interference. The recommended Channel spacing between adjacent Access Points is 5 Channels (e.g. use Channels 1 and 6, or 6 and 11). In "Infrastructure" mode, Wireless Stations normally scan all Channels, looking for an Access Point. If more than one Access Point can be used, the one with the strongest signal is used. (This can only happen within an ESS.) If using "Ad-hoc" mode (no Access Point), all Wireless stations should be set to use the same Channel. However, most Wireless stations will still scan all Channels to see if there is an existing "Ad-hoc" group they can join. WEP WEP (Wired Equivalent Privacy) is a standard for encrypting data before it is transmitted. This is desirable because it is impossible to prevent snoopers from receiving any data which is transmitted by your Wireless Stations. But if the data is encrypted, then it is meaningless unless the receiver can decrypt it. If WEP is used, the Wireless Stations and the Wireless Access Point must have the same settings. WPA-PSK Like WEP, data is encrypted before transmission. WPA is more secure than WEP, and should be used if possible. The PSK (Pre-shared Key) must be entered on each Wireless station. The 256Bit encryption key is derived from the PSK, and changes frequently. WPA-Enterprise This version of WPA requires a Radius Server on your LAN to provide the client authentication according to the 802.1x standard. Data transmissions are encrypted using the WPA standard. If this option is used: The Access Point must have a "client login" on the Radius Server. Each user must have a "user login" on the Radius Server. Each user's wireless client must support 802.1x and provide the login data when required. 89

44 Wireless Access Point User Guide All data transmission is encrypted using the WPA standard. Keys are automatically generated, so no key input is required x This uses the 802.1x standard for client authentication, and WEP for data encryption. If possible, you should use WPA-Enterprise instead, because WPA encryption is much stronger than WEP encryption. If this option is used: The Access Point must have a "client login" on the Radius Server. Each user must have a "user login" on the Radius Server. Each user's wireless client must support 802.1x and provide the login data when required. All data transmission is encrypted using the WEP standard. You only have to select the WEP key size; the WEP key is automatically generated. 90

45 Regulatory Approvals FCC Statement This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates, uses and can radiate radio frequency energy and, if not installed and used in accordance with the instructions, may cause harmful interference to radio communications. However, there is no guarantee that interference will not occur in a particular installation. If this equipment does cause harmful interference to radio or television reception, which can be determined by turning the equipment off and on, the user is encouraged to try to correct the interference by one of the following measures: Reorient or relocate the receiving antenna. Increase the separation between the equipment and receiver. Connect the equipment into an outlet on a circuit different from that to which the receiver is connected. Consult the dealer or an experienced radio/tv technician for help. To assure continued compliance, any changes or modifications not expressly approved by the party responsible for compliance could void the user's authority to operate this equipment. (Example - use only shielded interface cables when connecting to computer or peripheral devices). FCC Radiation Exposure Statement This equipment complies with FCC RF radiation exposure limits set forth for an uncontrolled environment. This equipment should be installed and operated with a minimum distance of 20 centimeters between the radiator and your body. This device complies with Part 15 of the FCC Rules. Operation is subject to the following two conditions: (1) This device may not cause harmful interference, and (2) This device must accept any interference received, including interference that may cause undesired operation. This transmitter must not be co-located or operating in conjunction with any other antenna or transmitter. The antennas used for this transmitter must be installed to provide a separation distance of at least 20 cm from all persons and must not be co-located or operating in conjunction with any other antenna or transmitter. Channel The Wireless Channel sets the radio frequency used for communication. Access Points use a fixed Channel. You can select the Channel used. This allows you to choose a Channel which provides the least interference and best performance. In the USA and Canada, 11 channel are available. If using multiple Access Points, it is better if adjacent Access Points use different Channels to reduce interference. In "Infrastructure" mode, Wireless Stations normally scan all Channels, looking for an Access Point. If more than one Access Point can be used, the one with the strongest signal is used. (This can only happen within an ESS.) If using "Ad-hoc" mode Access (no Point), all Wireless stations should be set to use the same Channel. However, most Wireless stations will still scan all Channels to see if there is an existing "Ad-hoc" group they can join. CAUTION: 1) To comply with FCC RF exposure compliance requirements, a separation distance of at least 20 cm must be maintained between the antenna of this device and all persons. 2) This transmitter must not be co-located or operating in conjunction with any other antenna or transmitter.